Nidhikosh Logo Nidhikosh

Privacy Policy

Last updated: August 9, 2026 Package: com.nidhikosh
Table of Contents
1. Overview 2. Data We Process 3. Device Permissions 4. How Data Is Used 5. Third-Party Services 6. Security & Storage 7. Data Deletion Rights 8. Children's Privacy 9. Data Safety Summary 10. Contact Us

1. Overview

This Privacy Policy explains how Nidhikosh ("we", "our", or "the app"), represented by package ID com.nidhikosh, handles user data. Nidhikosh is an Android personal finance application designed to track mutual fund portfolios, parse Consolidated Account Statements (CAS PDFs), calculate investment returns (XIRR), and monitor financial goals.

Nidhikosh operates on a local-first architecture. All your financial statements, folio transactions, and portfolio analytics are stored and processed strictly on your personal Android device.

2. Data We Process

Because Nidhikosh does not use external user account systems, all processed data remains locally on your device:

  • Mutual Fund & Transaction Records: Scheme names, folio numbers, unit holdings, purchase costs, NAV values, and investment dates parsed from uploaded CAS PDF statements or entered manually.
  • Financial Goals & Risk Settings: User-configured goal amounts and self-selected risk tolerance profiles (Conservative, Moderate, Aggressive).
  • CAS PDF Passwords: Passwords entered to unlock password-protected CAS PDF statements are processed ephemerally in RAM strictly during statement parsing and are never saved or transmitted.
  • Biometric Data: If local app locking is enabled, authentication requests use Android's native BiometricPrompt OS service. Nidhikosh never accesses or stores your raw biometrics.

3. Device Permissions

Nidhikosh requests standard Android system permissions necessary for app features:

Permission Purpose
android.permission.INTERNET Fetches updated public Mutual Fund Net Asset Value (NAV) quotes from public endpoints (e.g. MFAPI / AMFI). No personal identifiers are transmitted.
android.permission.READ_EXTERNAL_STORAGE Enables browsing and selecting local CAS PDF statement files for parsing.
USE_BIOMETRIC / USE_FINGERPRINT Enables optional local app lock protection using Android system hardware.

4. How Data Is Used

All data processed by Nidhikosh is used exclusively to render features on your local device:

  • To parse and consolidate mutual fund portfolio metrics and asset allocation ratios.
  • To compute XIRR returns, net worth growth, and goal completion progress.
  • To generate local risk-aligned mutual fund suggestions on-device.

5. Third-Party Services & Data Sharing

We do not sell, rent, or share your data with any third parties.

Nidhikosh queries public financial APIs (e.g. MFAPI.in / AMFI) over HTTPS strictly to retrieve public NAV prices using numerical scheme IDs. These network calls contain zero personal data or device serial numbers. The app does not integrate advertising SDKs, behavioral trackers, or third-party analytics services.

6. Security & Storage

All database records are encrypted at rest on your device using AES-256 SQLCipher encryption. Master keys are protected via Android's hardware-backed KeyStore system. Because your data is not stored on cloud servers, it is not vulnerable to remote server data breaches.

7. User Data Erasure Rights

Google Play Account & Data Deletion Compliance Nidhikosh does not require mandatory cloud account creation. All data is stored locally on your device, meaning **deleting your data does not require submitting a remote online request**.

You can permanently delete all app data at any time through the following methods:

  • In-App Clear Data: Open Nidhikosh → Settings → Tap "Clear Database / Reset Data".
  • Android System Settings: Device Settings → Apps → Nidhikosh → Storage & Cache → Tap "Clear Storage".
  • App Uninstallation: Uninstalling Nidhikosh automatically deletes the local encrypted database file permanently from your device.

8. Children's Privacy

Nidhikosh is intended for adult investors and individuals authorized to manage financial portfolios. The app is not directed to children under 13 years of age, and we do not knowingly collect information from children.

9. Google Play Data Safety Declarations

For Google Play Console submission and compliance verification:

Field Declaration
Data Collection & Sharing No user data collected or shared off-device.
Data Encryption in Transit Yes (HTTPS for public NAV queries).
Data Erasure Support Yes (Via in-app reset / app storage clearing).

10. Contact Us

If you have any questions or privacy inquiries regarding Nidhikosh, please contact us at:

Email: catchadvaitv@gmail.com